Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier: yqCF8jyBAnjO9ziqIoRdnVWFhFMASUpcInKZxsI9avA=
Subject key identifier: 73:44:12:FF:1A:3D:B3:FC:CA:59:6F:60:00:58:38:E2:61:BD:60:62
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial: 01987DC13A8EEEC70FC73B52E827C5B7F128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number: 1017
Signing time: Wed 06 Aug 2025 05:01:12 +0000
Manifest this update: Wed 06 Aug 2025 05:01:12 +0000
Manifest next update: Thu 07 Aug 2025 05:01:12 +0000
Files and hashes: 1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: /QO1v7Cku0dVV0F6PagsfHJoTWjLfANz21FCbcQYZ3A=)
2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:3a:8e:ee:c7:0f:c7:3b:52:e8:27:c5:b7:f1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
Validity
Not Before: Aug 6 05:01:12 2025 GMT
Not After : Aug 7 05:01:12 2025 GMT
Subject: CN=734412ff1a3db3fcca596f60005838e261bd6062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:7a:42:c0:27:e2:54:ed:12:a5:7d:b4:73:
61:4a:81:54:61:62:30:d8:27:03:66:df:ca:e9:72:
f4:46:dc:de:df:0b:43:e9:a4:66:5f:4b:c9:f2:b5:
f1:9c:c6:92:0e:7c:3a:d9:0f:35:f4:26:81:63:73:
27:be:ef:8d:c3:9c:ff:dd:c9:37:41:ee:bd:2d:df:
c7:a0:75:d3:c5:d8:8c:63:4a:a7:07:2f:b6:21:8b:
00:8b:e9:15:ee:b7:bd:cc:93:cc:91:42:95:d7:34:
e3:1a:14:50:a8:d3:7a:5d:3d:5f:6f:7a:80:f5:39:
4c:27:37:1f:23:92:46:59:4b:b4:c5:0d:77:7c:09:
68:8f:70:c0:bb:12:53:19:e3:ee:29:00:aa:a9:58:
b3:1c:16:38:3a:5d:f5:90:a7:ee:b0:be:1d:ba:77:
2a:02:95:d1:f4:c0:62:81:71:ea:da:54:1c:df:08:
f7:25:5a:3a:cb:8f:8c:0f:b9:10:ef:1c:8e:3d:51:
4a:12:7b:e9:12:4a:28:ad:2d:6e:b0:44:e8:60:4b:
3b:38:3f:ba:f4:1d:22:f6:50:02:fa:e4:5e:34:10:
fd:47:ee:0d:99:93:c6:2b:ad:d7:97:bd:14:dc:1d:
4c:17:34:22:ed:40:2f:86:cc:d5:b9:88:61:6c:17:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:12:FF:1A:3D:B3:FC:CA:59:6F:60:00:58:38:E2:61:BD:60:62
X509v3 Authority Key Identifier:
keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f7:8e:d2:46:6e:69:4f:21:4d:61:29:e3:cf:17:94:ce:ba:
bf:b5:51:75:49:39:7d:f3:91:d0:34:56:57:b5:9f:83:86:bb:
88:8c:11:99:ae:50:1a:41:8d:a3:f0:c6:c0:32:43:9e:16:3a:
0b:82:23:e0:2a:9c:f2:a4:e8:a8:31:a8:a7:4b:26:8f:19:5e:
98:61:73:d6:12:d7:6b:d8:47:58:7a:27:aa:e0:4c:a3:ef:8d:
14:3b:46:8f:90:c0:5b:6b:56:d1:29:d7:f2:d5:3d:cb:1a:8f:
80:16:12:1d:d6:4b:00:8b:43:b9:bd:2a:10:66:c8:b7:0a:69:
fc:39:05:cc:ac:e7:89:51:bc:03:09:55:b5:6b:19:ae:ec:4e:
c0:8f:51:4e:2a:f2:ff:02:c6:8e:7e:f0:34:10:54:97:c4:6d:
cb:aa:bd:69:c9:ce:dd:1d:b7:0a:af:84:b7:ab:c0:ae:8b:5f:
91:d5:58:99:0f:72:14:77:44:17:27:a5:8b:e7:dc:db:b8:d4:
91:f2:24:a7:20:b2:47:7c:f5:b3:77:a5:43:cb:0c:83:46:42:
ed:f4:87:94:d8:41:a8:93:21:42:37:27:ae:d1:24:ae:2a:86:
38:0d:08:71:b2:ae:01:ec:72:f5:63:46:d4:03:af:8a:1b:73:
a0:e9:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:20:25 2025 by rpki-client